(ITS#4846) attribute 'objectClass' provided more than once

[wolfgang.christ@secunet.com]

Full_Name: Wolfgang Christ
Version: 2.3.32
OS: linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (213.68.205.167)


I'm trying to replicate an OpenLDAP DB using slurpd. But even a simple ldapadd
with an LDIF file like this:

dn: cn=wolfgang,ou=organization unit,o=organization,c=de
objectClass: inetOrgPerson
objectClass: person
cn: wolfgang
sn: hilfe
userCertificate;binary:< file:///cert.crt

OpenLDAP returns an error "attribute 'objectClass' provided more than once". If
I
remove the second objectclass with certificate and and add these in a seperate
modify step, everything is fine.

If i modify "servers/slapd/add.c" in line 318:

/* check for unmodifiable attributes */
/*rs->sr_err = slap_mods_no_repl_user_mod_check( op,
modlist, &rs->sr_text, textbuf, textlen );
if ( rs->sr_err != LDAP_SUCCESS ) {
  send_ldap_result( op, rs );
  goto done;
}*/

and prevent calling of slap_mods_no_repl_user_mod_check(), replication works.

Could you explain, what is the sense of slap_mods_no_repl_user_mod_check()
and why it causes slurpd not to work.

kind regards
Wolfgang Christ